Wiz Combines Agentless and Runtime File Integrity Monitoring
Summary
Wiz announced hybrid file integrity monitoring that combines agentless coverage with runtime visibility into file changes, custom rules for sensitive files, and configurable response actions.
Key points
- A single FIM policy can be applied to both agentless and runtime monitoring.
- Runtime monitoring can identify who modified a file and cover ephemeral container file systems.
- Custom rules let teams monitor organization-specific sensitive files and directories.
- Runtime threat detection rules can be configured to terminate unauthorized processes that modify critical files.
- Notifications and automation rules can be applied to agentless and runtime detections.
Article Details
- Event Type
- Wiz product capability announcement
- Impact
- Wiz introduced runtime File Integrity Monitoring (FIM) alongside its agentless FIM, allowing customers to apply a single policy across both approaches. Runtime monitoring provides additional context about file changes, including the process responsible, and supports monitoring ephemeral container file systems. Customers can create custom rules for sensitive files and configure response actions, such as terminating unauthorized processes that modify critical files. The article describes product capabilities and compliance benefits; it does not report a security incident or customer impact.